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RELATED APPLICATIONS 

This patent application claims priority to Provisional U.S. Patent Application 
No. 60/097,414, entitled "Online Trading System" and filed on August 21, 1998, which is herein 
incorporated by reference. 

The following identified U.S. patent applications are relied upon and are incorporated in their 
entirety by reference in this application. 

U.S. Patent Application No. , entitled "A Real-Time Computerized Stock Trading 

System" bearing attorney docket no. 07444.0001, and filed on the same date herewith. 

U.S. Patent Application No. , entitled "Volume Limitation Method and System for 

A Real-Time Computerized Stock Trading System" bearing attorney docket no. 07444.0013, and 
filed on the same date herewith. 

BACKGROUND 

| The present invention relates generally to stock trading, and more particularly to a method 

j and system for protecting against intentional market manipulation in a real-time computerized stock 
trading system. 

Most trading environments with many investors have "liquidity," which is a level of trading 
ji volume that makes it easy to buy or sell a particular security. In simple terms, there are many of 
I buyers, sellers, and trades. The most important thing that liquidity provides is price efficiency: the 
; more liquidity, the more efficient the market, and the closer the price will be to the "true" price (in 
| a perfectly efficient market). This makes it very difficult for one person or organization to affect the 
i market or the price of the security. 
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Some trading environments are illiquid, however, and thus susceptible to manipulation. A 
trading environment may be illiquid if it does not have enough trades on it, thus causing situations 
in which there are not enough buyers for the sellers, or vice versa. Such illiquid trading 
environments may be manipulated by investors and users. One such form of manipulation is "self- 
trading," in which an individual investor trades with himself and sets any price he wishes because 
he is not losing or gaining any money. The ability to set trading prices can create the appearance of 
the market moving up or down, when in actuality, no real trading is occurring. Through self-trading, 
an individual can create the appearance of stock prices skyrocketing or plummeting without losing 
money, thus creating an adverse effect on the illiquid market. "Round-robin" trading, in which 
several investors trade amongst themselves in effect creating self-trading within a small group, can 
similarly manipulate the market. 

SUMMARY 

A method for protecting against manipulation in a data processing system for trading stocks 

I is provided that receives a trade order from a first user and a second trade order from a second user. 

i 

i 

j It assigns an identifier to the first trade order, the identifier uniquely identifying the first user. 

i 

j Similarly, it assigns a second identifier to the second trade order, the identifier uniquely identifying 

! j 

the second user. Finally, it compares the first and second identifiers to compare the first and second 
: identifiers to control the trading of stocks. 

In accordance with another aspect of the present invention, a method is provided that 
I determines whether a first user has executed trades with a second user more than a predetermined 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporated in and constitute a part of this I 
specification, illustrate an implementation of the invention and, together with the description, serve 
to explain the advantages and principles of the invention. In the drawings, 

Figure 1 illustrates a block diagram of a real-time computerized trading system with an anti- 
manipulation component in accordance with the present invention; 

Figure 2 displays a flowchart illustrating the steps of a method for placing a trade order in 
the trading system in accordance with the present invention; 

Figures 3A, 3B and 3C depict exemplary broker-dealer order entry screens in accordance 
with the present invention; 

Figure 4 illustrates the steps of a method for matching a trade order in the trading system in 
accordance with the present invention; 

Figure 5 depicts the steps of a method for publishing the trading system market information 
over a network, such as the Internet, in accordance with the present invention; 

Figure 6 shows a market information mechanism in accordance with the present invention; 

Figure 7 depicts the steps of a method for detecting self trading market manipulation in a 
trading system in accordance with the present invention; and 

Figure 8 depicts the steps of a method for detecting round-robin market manipulation in a 
trading system in accordance with the present invention. j 



DETAILED DESCRIPTION 

Methods and systems consistent with the present invention protect against and/or detect 
market manipulation in real-time computerized stock trading systems. These stock trading systems 
may provide trading environments that do not have a high level of liquidity and may thus be 
susceptible to intentional malicious manipulation of the trading system's market. Two such forms 
of market manipulation are self-trading and round-robin trading, wherein a user trades with himself 
or a small group of other users to artificially manipulate the market. The self-trades and round-robin 
trades can intentionally create false impressions of the market moving up or down without the 
manipulating user or users risking any money. For instance, if a user buys up all outstanding orders 
for a particular stock, the user may then put in sell orders at high prices and buy them back from 
himself to create an impression that the stock price is rising or falling without actually risking any 
money. Methods and systems are provided to flag or reject such trades. 

In accordance with the present invention, an identifier uniquely identifying a user is applied 
to the trade order placed by the user. This unique identifier associated with the individual trade order 
is compared with the identifiers on matching trade orders with which the placed trade order would 
be executed. The anti-manipulation system then uses the identifiers to flag or reject trade orders 
placed to intentionally manipulate the trading system's market. 

In accordance with another aspect of the present invention, the system determines whether j 
a first user has traded with a second user more than a predetermined number of times and identifies i 
users based on the determination to detect round-robin trading. 



To describe methods and systems in accordance with the present invention, first, an example ; 
of a real-time computerized trading system is described. This trading system is similarly described 
in co-pending U.S. Patent Application Serial No. . It describes a real-time, after-hours 

computerized trading system that provides trading to both retail and institutional users and may j 

i 

utilize anti-manipulation methods and systems consistent with the present invention. It should be j 
noted that after-hours refers to any time outside of exchange trading hours, i.e., any time the primary j 
securities exchanges such as the New York Stock Exchange and the American Stock Exchange do 
not accept for immediate execution purchase or sale orders for securities, including before the j 

exchanges open. The description of the system is followed by description of anti-manipulation j 

I I 
j methods and systems in accordance with the present invention. 

Trading System j 

Figure 1 illustrates a block diagram of an exemplary real-time computerized trading system , 

consistent with the present invention. Retail or institutional investors, referred to as users 10, may : 

access the trading system 28 directly through their personal computers using the existing online i 

j 

|j trading networks of their brokerage firms, referred to as broker-dealers 18 ("BD"). The trading 

i 

j system 28 contains the anti-manipulation component 38 which may be implemented as software or 
|j hardware and is described below. Online investors' trades may be filtered through their broker- 

i ' ■ ; 

: , I 

;i dealers' computer systems, as they currently are, to ensure that the investors' accounts contain : 
ji necessary buying power and meet requirements imposed by the broker dealers 1 8 for the transactions 
i: they wish to conduct on the system. However, the user 1 0 does not necessarily have to connect to 
j; the system through a brokerage firm, and the connection may be directly to the trading system 28 or 

i . 

I! ; 
by other means. Additionally, users 10 may also be broker-dealers 18. 
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The computer systems used by users 10, broker-dealers 18, and the trading system 28 may 
be general-purpose computers that run the necessary software or contain the necessary hardware 
components for implementing methods consistent with the present invention, and these computer 
systems may have additional components not shown on Figure 1 . Furthermore, although two broker- 
dealers 1 8 and six users 10 are shown on the figure, any number of broker-dealers 1 8 and users 10 
may use the trading system 28 in accordance with the present invention. 

The various software components of a system consistent with the present invention may be 
programmed in a programming language such as the Java™ programming language, which is further 
described in "The Java programming Language," 2 nd Ed., Ken Arnold, James Gosling, Addison- 
Wesley, 1998, which is incorporated herein by reference. For further description of the Java 
language, refer to "The Java™ Language Specification," James Gosling, Bill Joy, Guy Steele, 

Addison- Wesley, 1 996 and is also incorporated herein by reference. When programmed in the Java J 

j 

programming language, the source code for the software is portable across multiple operating 
systems (/. e. , Unix, NT, etc.) and easily deployed over the Internet, but other programming languages 
may also be used. 

Figure 2 illustrates a flowchart of the steps of a method for placing a trade order in the trading 
system in accordance with the present invention. Generally, a user 1 0 enters a trade order through 
the order entry mechanism 12 that is, in one implementation, supplied by the broker-dealer 18 
|| (step 202). The order entry mechanism 1 2 may be an applet containing screens used to interface with 
jj the broker-dealer 1 8. The user 1 0 may make decisions on various trades based on information from 
ji the market information mechanism 14, which will be described below. 
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Figure 3 A illustrates an exemplary broker-dealer' s initial order entry screen in the order entry 
mechanism 12. Shown on the screen is a user identification and a password log on. The screens 
supplied to the user 1 0 in the order entry mechanism 1 2 may be the standard screens currently given 
to the user by a broker-dealer 18 with online capabilities, and they may vary greatly from the ones 
shown in the drawings. 

Figure 3B shows the next exemplary screen contained in the order entry mechanism 1 2 given 
to the user 10. On this screen, the user 10 may decide whether to buy or sell an amount of a certain 
type of stock at a specific price. For example, the screen in Figure 3B shows a user 10 placing an 
order to buy 100 shares of IBM stock at one hundred dollars per share. 

Figure 3 C depicts the following exemplary screen contained in the order entry mechanism 1 2. 
This screen displays pending open orders for the exemplary user 10. As shown on the figure, the 
screen shows a user 10 placing an exemplary buy order for 100 shares of IBM stock at 100 shares, 
and it shows that the buy order has not yet been filled. 

Referring back to Figure 1 and Figure 2, information entered by the user 1 0 to the order entry 
mechanism 1 2 travels to the broker-dealer 1 8 via a network 1 6 such as the Internet (step 204). This 
network 16 facilitates the transferring of order entry information to and from the user 10 by the 
broker-dealer 18. As discussed below, it also facilitates the publication of the real-time market 

ji 
ij 

information to the user 10 from the trading system 28. 

jj 

In one system consistent with the present invention, when the user 1 0 communicates across \ 
■I the network 1 6 with the broker-dealer 1 8, it does so via the broker-dealer web server 20. The broker- 
|j dealer web server 20 is the broker web site which, in one implementation, hosts the order entry j 
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mechanism 12 which the user 10 utilizes to enter trade orders. Once a trade order is entered, it is 
then relayed from the broker-dealer web server 20 to order processing 22 on the broker-dealer 18. 

Order processing 22 is a "black box" representation of a broker dealer's back-end system that 
performs order verification, updates account positions (i.e., cash and securities), updates buying 
power, etc. Before the trade order is routed for execution (to the principal market exchanges or to 
the trading system 28 described below), order processing 22 verifies the order to make sure the user's 
account has the cash, securities or buying power to make the transaction (step 206). If approved 
(step 208), order processing 22 routes the trade order to the trading system interface 24, which is a 
software component that forwards the order information to the trading system 28 across a private 
network 26 (step 210). If the trade order is not approved by the BD 1 8, the BD notifies the user 1 0 
(step 212). 

In one implementation consistent with the present invention, the private network 26 is a 
private leased line network for security and performance advantages. Private leased lines are 
essentially telephone lines that are leased from a phone company for exclusive use. They are secure 
because only one system uses the lines, and they offer better performance because the system does 
not share bandwidth with other systems or businesses. Although the private network 26 realizes 
some advantages, a public network may also be used, 
j; The trading system interface 24 represents the order approving mechanism by which orders 

jj are translated and transmitted from the broker-dealer 1 8 to the trading system's broker-dealer 
j! interface 30. The trading system interface 24 receives order confirmation and execution information 
|| from the broker-dealer interface 30 after the order has been processed by the trading system 28. 



Finnegan, Henderson, j; 
Farabow, Garrett, :! 

& DUNNER, L. L.P. 

1300 I STREET, Ni. W. 

v,V5 - -\C--C f v I-{ ? C C C : 



ii After execution on the trading system 28 (described below), the order execution information is 

9 



10 



15 



20 



relayed back to the trading system interface 24 and then to order processing 22. The order execution 
information received from the trading system 28 is used to update the account position and buying 
power in the account by the broker-dealer 18. 

When a broker-dealer 18 routes orders and communicates with the trading system 28, it 
preferably communicates using the Financial Information Exchange protocol ("FIX"), a protocol 
developed by the securities industry to standardize communications between brokerage firms. 
Alternatively, the broker-dealers 18 and the trading system 28 may use other communication 
protocols. 

The configuration and implementation of order processing 22 may vary widely among 
broker-dealers 18. Most notably, numerous broker-dealer 18 firms outsource order processing 22 
to third party broker-dealers called "clearing firms" which perform order processing 22 and other 
| back-office functions for multiple client broker-dealers firms. In this case, as indicated in Figure 1 , 
! the link between the trading system 28 and the broker-dealer 18 (which, as shown on Figure 1, is 

ji 

!i comprised of the trading system interface 24, private network 26, and BD Interface 30) is through 

it 

the clearing firm. 

Figure 4 illustrates the steps of a method for matching a trade order in the trading system in 
accordance with the present invention. The BD interface 30 on the trading system 28 is the 

•i 

: component which receives orders from the BD 18 and sends confirmation/execution information 
;! back to the BD (step 402). It translates communications to the trading system 28 application 
: ; programming interface (API), a formal set of specifications for one program to communicate with 
another program, which it uses to communicate with the matching engine 32 (step 404). 
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The matching engine 32 is the software component of the trading system 28 which actually 
performs order matches and executions. In one implementation consistent with the present 
invention, all of the matching logic (including anti-manipulation and other defensive schemes) is 
contained in the matching engine 32. In this implementation, the anti-manipulation component 38 
(described below) is shown in the matching engine 32, although other implementations may have 
it located elsewhere. When the matching engine 32 receives trade orders, it checks the database 34 
for open orders to be matched (step 406), determines if a match is made (step 408) and updates the 
database 34 accordingly. For example, if one user 10 has placed an order to sell a certain number 
of shares of a specific stock, and another user 1 0 has placed an order to buy a certain number of 
shares of the same stock, and their prices match, the matching logic in the matching engine 32 
registers a match (step 410). The matching engine 32 determines how many shares of that stock will 
change possession from the seller to the buyer. 

Generally, orders that cross the market will result in execution at the best counterpart price 
currently offered on the trading system 28. If a user does not wish to buy as many shares as a seller 
is offering, partial order matches may be executed and the remaining quantity of the larger order may 
remain open and post back to the trading system 28 to be matched. If a match is determined between 
two trade orders, the matching engine 32 executes the order immediately and relays the order 
i execution information to the database 34 for persistent storage (step 412). If the matching engine 
; 32 does not find a matching open order for the received trade order, the trade order is stored in the 
i database 34 as an open order to be matched with future trade orders (step 414). 
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The database 34 is the central repository for information in the trading system 28, including 
open orders, execution information, and audit trails. In one implementation consistent with the 
present invention, the database server 34 is an object-oriented database, although other types of 
databases may also be used. The database 34 on the trading system 28 stores the order information 
used by the matching engine 32 to determine a match. In doing so, it stores data relating to open 
orders and executed orders, in addition to other relevant data for the trading system 28. 

Figure 5 depicts the steps of the method for publishing the trading system market information 
over a network, such as the Internet, in accordance with the present invention. While receiving and 
executing trade orders, the trading system 28 may also publish its market information in real-time 
over a network such as the Internet 16. The Read-Only Applet Server 36 on the trading system 28 
reads market information to be displayed over the Internet 16. It receives the market information 
from the database 34 (step 502) and relays it to the user 10 via the trading system web server 38, 
which is the trading system web site that sends the market information over the Internet 16 
(step 504). The trading system web server 38 hosts the market information mechanism 14, utilizing 
data from the Read-Only Applet Server 36. This market information mechanism 14 may contain an 
applet, referred to as an "order book," showing open orders in the trading system 28 to the user 10 
(step 506). 

Figure 6 illustrates an exemplary order book in accordance with the present invention. The 
order book provides real-time quotations of all open trade orders on the trading system 28, grouped 
by security and listed by price and time of entry, for example. Besides enabling users 10 of the 
trading system 28 to identify and follow their own orders on the trading system, the order book may 
also display additional information such as a stock's closing price for the day on the principal market 
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including price, volume, high and low prices, and the price change for the day. It may also display 
the last price at which a stock was executed on the trading system 28 and the quantity and time of 
the trade. Additionally, the order book may give other information such as the price change from 
the closing price for the day on the principal markets, the chart of prices and times of all executions 
in that stock during the session, and session high, low and volume information for the stock. 

Some implementations consistent with the present invention may further display additional 
information to keep the users 10 informed. This information may include a list of the most active 
stocks during a particular session, indications of price swings of more than a particular percentage 
(e.g. , 1 0 percent), from the stocks closing price during a session. Furthermore, the order book may 
publish information regarding the types of orders that can be entered, in addition to real-time, after- 
hours news for use by all participating users 10 on the trading system 28 and the general public. 
Anti-Manipulation 

Figure 7 illustrates the steps used in a method for anti-manipulation of a trading system in 
accordance with the present invention. In one implementation in accordance with the present 
invention, the anti-manipulation component 38 identifies intentional market manipulation, rejects 
or flags suspect trades, and performs related functions. Initially, when the trading system 28 receives 
a trade order (step 700), it assigns a unique identifier to the trade order, and the anti-manipulation 
component 38 receives the unique identifier (step 702). This identifier uniquely identifies the 
|| identity of the user 10 placing the trade order, and consequently, all trade orders on the trading 
|| system 28 are traceable to a specific user 10 for the purpose of identifying intentional malicious 

ji 

| market manipulation. The unique identifier may be, for example, the user's Social Security number 
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identifiers may be used to identify the user 10 placing the trade order. In another implementation 
in accordance with the present invention, the unique identifier is a combination of a code derived 
from the user's BD account number and code that identifies the user's BD. 

The anti-manipulation component 38 operates when the matching engine 32 searches for a 
match for the received trade order (step 704). If the matching engine 32 finds no match for the trade 
order, the trade order is stored to be matched later as previously described (step 706). However, if 
the matching engine 32 determines that there is a matching trade order on the trading system 28, the 
anti-manipulation component 38 compares the unique identifiers of the two matching trade orders 
(step 708). If the identifiers are determined to be equal (step 710), the anti-manipulation component 
3 8 rejects the trade or identifies the trade as self-trading or a market manipulation (step 7 1 2). If they 
are not determined to be equal, the trade executes (step 714). 

For round-robin trading, the anti-manipulation component 38 performs detection of 
manipulation either during trading activity or after a period of trading activity time, such as a day's 
trading session. In one implementation consistent with the present invention, the anti-manipulation 
component 38 analyzes trading activity automatically at the end of a trading session. The analyzed 
period of time may vary, and a system administrator or programmer determines the period of time 
or trading session to analyze (step 800). When the trading session ends (step 802), the trading 
system 28 generates electronic trading activity reports containing information on executed trades and 
the users 10 involved in each trade transaction (step 804). These reports may be in the form of 
database information so that they may be analyzed by computer software. 
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The anti-manipulation component 3 8 then searches the trading activity reports for potentially j 

i 

suspect trades (step 806). If it determines that any two users 1 0 have traded between each other more j 

i 

than once in the trading session (step 808), it identifies or flags the users' activity (step 810) for a 
system administrator or analyst. In doing so, the system searches for two or more trades between 
two users 10; the trades may be for different securities and may go either way, i.e., buy or sell, 
between the users 10. Once the trading activity has been automatically identified by the trading 
system 28, the system administrator may determine whether the identified trades are actually an 
attempt at manipulating the trading system. 

This manner of detecting round-robin manipulation detects simple round-robin trading 
between two users and more complex round-robin trading between multiple users. It assists in the 
detection of complex round-robin trading because it identifies individual sections of larger, more 
| complex trading circles or schemes, and the larger scheme may be identified using the individual j 

! j 

j sections. Over longer periods of time, larger, more complex schemes may use the same individual I 

\ \ 

j two users 1 0 repeatedly as part of their schemes, thus making their detection easier. 

Furthermore, although described in this implementation as being performed after the closing | 

I ■ ! 

| of a trading session, analysis of whether two users 10 have traded with each other more than once j 
in a trading session may be performed in real-time and during the trading session. If operating in I 
;! real-time, the anti-manipulation component 38 and trading system 28 may be configured not to ! 
■ automatically reject potential round-robin trades and simply to identify them for separate analysis 
i in order to avoid accidentally rejecting purely coincidental trades. 
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The foregoing description of an implementation of the present invention has been presented 
for purposes of illustration and description. It is not exhaustive and does not limit the present . 
invention to the precise form disclosed. Modifications and variations are possible in light of the i 
above teaching or may be acquired from practicing of the present invention. The scope of the present j 
invention is defined by the claims and their equivalents. 
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